The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes 9 vulnerabilities is now available.
Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356) Add upstream patches to build against openssl 4.0 Make configure.ac work with autoconf 2.73
oxenstored keeps quota related use counts across domain destruction [XSA-483, CVE-2026-23556] Xenstored DoS via XS_RESET_WATCHES command [XSA-484, CVE-2026-235…
The oldstable (bookworm) backport of the security fix for CVE-2026-0394 introduced a regression in the passwd-file path normalization. Updated packages are now…
Three security vulnerabilities were discovered in libexif, a library to reads and writes EXIF metainformation from and to images files, that can causes crashes…
An update that solves 38 vulnerabilities, contains one feature and has 17 security fixes can now be installed.
Most information security best practices are built on a single, comfortable assumption: that if we find a bug, we can patch it, and once it's patched, the syst…
cPanel has released security updates to address a security issue impacting various authentication paths that could allow an attacker to obtain access to the co…
An update that solves 49 vulnerabilities, contains four features and has 23 fixes can now be installed.
An update that solves 17 vulnerabilities and contains one feature can now be installed.
An update that contains security fixes can now be installed.
When setting up network security systems, it is critical to ensure they work correctly and do not have flaws waiting to be exploited.
An update that solves 10 vulnerabilities, contains one feature and has one security fix can now be installed.
An update that solves nine vulnerabilities, contains one feature and has one security fix can now be installed.
An update that fixes 18 vulnerabilities is now available.
An update that fixes two vulnerabilities is now available.
An update that contains two features and has 10 fixes can now be installed.
You scroll past one incident and see another that feels familiar, like it should have been fixed years ago, but it still works with small changes. Same bugs. S…
Zou Dikai discovered a buffer overflow in ngtcp2, a QUIC protocol library. For the oldstable distribution (bookworm), this problem has been fixed in version 0.…
An update that solves one vulnerability and has one errata is now available.
Byambadalai Sumiya discovered that SimpleEval, a library for adding evaluatable expressions into Python projects, didn't fully restrict some module references,…
MGASA-2026-0104 - Updated python-cairosvg packages fix security vulnerability
New tigervnc packages are available for Slackware 15.0 and -current to fix security issues.
The National Institute of Standards and Technology (NIST) has announced changes to the way it handles cybersecurity vulnerabilities and exposures (CVEs) listed…